01 / CONNECT
Connect securely.
Admin-approved access, with no passwords shared.
SENTRY SCAN
What’s in your history?
Let’s find out.
No incident required. Sentry Scan gives you a fresh look at the Microsoft 365 activity already in your environment.
HOW SENTRY SCAN WORKS
A fresh look.
A clear report.
02 / LOOK BACK
Up to six months.
Look back across your available Microsoft 365 activity.
03 / UNDERSTAND
Results in 24–48 hours.
A PDF summary and Excel evidence report, once connection and data are confirmed.
RETROSPECTIVE SCANNING
A little curiosity.
A clearer baseline.
New client, established environment, or simply curious? Sentry Scan connects historical sign-ins, email, files, and application activity to show what deserves a closer look.
UNCOVER
Earlier compromise
Find signs of attacker activity that began before the current investigation.
CONNECT
The full sequence
Follow access, activity, and affected resources across evidence sources.
UNDERSTAND
What remains
Examine persistence and the impact that may still need attention.
A CLOSER LOOK
Good questions.
Clear answers.
When would I use Sentry Scan?+
Any time you want a clearer picture. You might be onboarding a client, reviewing your own environment, or simply curious. You do not need to suspect a compromise to request a scan.
How far back does the scan go?+
Sentry Scan reviews up to six months of available history. Source retention and logging coverage determine the activity that can be examined.
What do I receive, and when?+
A PDF summary and Excel evidence report covering findings, the connected sequence, and recommended next steps. Expect results in 24–48 hours after connection and data availability are confirmed.
What access is needed?+
An authorised administrator approves the Microsoft 365 connection after reviewing the permissions. No passwords are shared with Sentry. Scan reviews activity metadata, not email contents. Requesting a scan does not connect a tenant or authorise remediation.
How does Scan relate to the Sentry platform?+
Sentry Scan focuses on historical assessment. The wider Sentry platform brings unified evidence, behavioural detection, automated remediation, and forensic investigation together.
MEET SENTRY SCAN
What’s in
your history?
You don’t need to suspect a compromise to take a closer look. Look back through up to six months of available activity. Get a PDF summary and Excel evidence report in 24–48 hours after connection.
Free assessment · No incident requiredRequest your free scan How Sentry Scan worksSentry ScanSAMPLE REPORT
A look beneath the surface.
Example environment · Historical assessment
02findings to review
Mailbox forwardingReview
Application accessReview
Identity timelineConnected
Illustrative findings. Your results depend on the available evidence.